Sr. Service Engineer

Providence India; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Qualifications

• 3–5 years of hands-on experience with Microsoft MECM/SCCM and/or Microsoft Intune, with strong practical experience in at least one and working knowledge of the other.
• Hands-on experience with MECM application/package deployment and Intune application deployment.
• Good understanding of Windows Autopilot, enrolment, ESP, and provisioning processes.

Responsibilities

• Support and administer MECM/SCCM and Intune environments, including policies, configurations, collections/groups, and deployments.
• Create, modify, test, deploy, and maintain endpoint configurations and policies in MECM and Intune.
• Deploy and troubleshoot enterprise applications through MECM and Intune across a large Windows endpoint environment.
• Support Windows Autopilot provisioning including profile assignments and enrollment status details.
• Support and troubleshoot Windows OSD, updates, and security baselines; implement endpoint security configurations using Intune policies.
• Monitor and remediate device compliance, configuration, patching, and security posture to meet standards.
• Develop and maintain PowerShell scripts for endpoint administration, troubleshooting, reporting, and automation.
• Collaborate with IT/service desk, security, and infrastructure teams to resolve endpoint issues.

Skills

MECM/SCCM

Microsoft Intune

PowerShell scripting

Azure AD / Entra ID

OS Deployment (OSD)

Windows 10/11

Tools

Windows Event Logs

Intune diagnostics

Job description

Key Responsibilities

• Support and administer
• Support and administer Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune environments, including policies, configurations, collections/groups, and deployments.
• Create, modify, test, deploy, and maintain endpoint configurations and policies in MECM and Intune.
• Deploy and troubleshoot enterprise applications through MECM and Intune across a large Windows endpoint environment. Support and troubleshoot Windows Autopilot provisioning, including profile assignments, Enrollment Status Page (ESP), application installation, and enrollment failures.
• Support Windows operating system deployment (OSD), feature updates, quality updates, and configuration changes. Implement and maintain endpoint security configurations using Intune security policies, security baselines and BitLocker.
• Monitor and remediate device compliance, configuration, patching, and security posture to meet organizational standards.
• Support vulnerability remediation and endpoint hardening initiatives by deploying required configurations, patches, applications, and remediation scripts.
• Monitor endpoint health and troubleshoot client issues related to MECM agents, Intune enrollment, policy processing, application deployments, Windows Updates, and device compliance. Troubleshoot complex endpoint deployment and configuration issues using relevant MECM/Intune logs, Windows Event Logs, and diagnostic tools.
• Develop and maintain PowerShell scripts for endpoint administration, troubleshooting, reporting, and automation.
• Collaborate with regional IT/service desk teams, security teams, application owners, and infrastructure teams to resolve endpoint-related issues.
• Participate in on-call/support rotations as required and maintain technical documentation for configurations, deployments, operational procedures, and troubleshooting.

Required Skills

3–5 years of hands‑on experience with Microsoft MECM/SCCM and/or Microsoft Intune, with strong practical experience in at least one and working knowledge of the other. Hands‑on experience with:MECM application/package deploymentIntune application deploymentConfiguration profiles and compliance policiesWindows AutopilotWindows Update management / patchingDevice enrollment and provisioningEndpoint troubleshootingPowerShell scripting. Good understanding of Microsoft Entra ID (Azure AD), device identities, GroupPolicy, security groups, and Conditional Access concepts. Good understanding of Windows 10/11 endpoint administration and troubleshooting. Ability to analyze deployment failures using MECM client logs, Intune diagnostics, Windows Event Viewer, and registry/configuration data.